Bugtraq mailing list archives

UPDATE: MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing


From: Tom Yu <tlyu () mit edu>
Date: Mon, 04 Jan 2010 23:59:32 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Updated to reflect the need to authenticate for successful
exploitation.  This decreases the severity level of the vulnerability.

    http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (SunOS)

iEYEARECAAYFAktCxzcACgkQSO8fWy4vZo5vdgCgkB8odnwOQixbESFIpqoF0O6t
CboAoNfB6WfXjCnMzAKRe9ZgRyyYAk7b
=87Ju
-----END PGP SIGNATURE-----


Current thread: